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(57) A method for copy protecting a record carrier 
(1) is disclosed, in which method the copy protected 
record carriers (1 ) are provided with a pattern of logical 
errors (2) which cannot be corrected by the error cor- 
recting rules predefined for said record carrier (1) and 
which pattern of logical errors (2) is defined by error lo- 
cations and non-error locations. The pattern of logical 



errors (2) represents access control information. The 
logical errors (2) are generated during decoding the bit 
sequence read from the record carrier (1 ). Bit errors may 
be positioned in the bit sequence so as to counteract 
de-interleaving which is part of an error decoding proc- 
ess in a reading device and accumulate in error words 
which are uncorrectable. 
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Description 

[0001 ] The invention relates to a method for copy pro- 
tecting a record carrier, copy protected record carrier 
and method for detecting access control information 
[0002] A system for copy protecting a record carrier 
a copy protected record carrier and a reading arrange- 
ment are known from EP-0545472 (document D1 in the 
list of related documents). The known record carrier 
comprises a prearranged guiding track, a so-called pre- 
groove. In the track determined by the pregroove : infor- 
mation which is written in a predefined manner is repre- 
sented by optically readable patterns which are formed 
by variation of a first physical parameter, such as the 
height of the scanned surface. The pregroove has var- 
iations in a second physical parameter, such as an ex- 
cursion in a transverse direction, also denoted as wob- 
ble. Pregroove wobble is FM -modulated and this mod- 
ulation represents access control information which is 
related to information, such as a descramble code for 
recovering information stored as scrambled information. 
The known device comprises reading means for reading 
the patterns and recovering means for recovering the 
access control information. The known device and in- 
formation carrier form a system for controlled informa- 
tion reproduction. For this purpose, the device compris- 
es means for reproducing the information in depend- 
ence on -the access control information. If the informa- 
tion is copied on a writable information carrier, the infor- 
mation of this copy will not be reproduced, because dur- 
ing the writing process only the patterns are written and 
the copy itself does not contain any access control in- 
formation. A problem in the known system is that the 
reading means must be able to recover the access con- 
trol information by detecting the variations of the second 
physical parameter. 

[0003] It is to be noted, that WO 95/03655 (document 
D3) describes a CD PROM encryption system, in which 
the information on a CD-ROM is encrypted by a key, 
which key is programmed into the CD-ROM after man- 
ufacture by damaging selected sectors to be unreadable 
by conventional read systems. The selected sectors are 
physically damaged by a high power laser. Record car- 
riers are individually enabled by having a specific key 
for a certain user or group of users. 
[0004] It is an object of the invention to provide a sys- 
tem for copy protecting record carriers which does not 
rely on variations of physical parameters, while the mak- 
ing of usable copies on writable information carriers is 
counteracted. The invention is defined by the independ- 
ent claims. The dependent claims define advantageous 
embodiments. 

[0005] Further advantageous, preferred embodi- 
ments of the copy protected record carrier, the retrieval 
arrangement and methods according to the invention 
are described below 

[0006] These and ot^ ■■ aspects of the invention will 
be apparent from and e . ..tdated further with reference 



to the embodiments described by way of example in the 
following description and with reference to the accom- 
panying drawings, in which 

5 Fig. 1 shows a copy protected record carrier 

Fig. 2 shows a logical map of the recording area of 
a copy protected record carrier 
Fig. 3 shows an error correcting unit 
Fig. 4 shows a bit error pattern 

io Fig. 5 shows an arrangement for retrieving informa- 
tion from a copy protected record carrier 
Fig. 6 shows a schematic diagram for copy protect- 
ing a record carrier 

75 [0007] Figure 1 shows schematically a disc-shaped 
copy protected record carrier 1 . The record carrier com- 
prises a track 9 for storing information, which track is 
arranged in a helical pattern of windings around a cen- 
tral hole 10. The windings may also be arranged con- 

20 centrically in lieu of helically. The record carrier 1 is of 
an optically readable type in which a transparent sub- 
strate is covered by a recording layer and a protective 
layer, such as the well-known Compact Disc (CD). In- 
formation on the information carrier is represented by 

25 patterns of optically readable marks. For example, the 
position and/or the length of the marks then represent 
a binary information signal. The marks may be made by 
presses, as is customary for read-only CD's, such as 
CD-ROM on which embossed pits and lands between 

30 the pits represent the information. The invention can be 
used for any type of record carrier, on which information 
is recorded according to predetermined error correcting 
rules, such as the high density optical disc DVD (Digital 
Versatile Disc), optical tape or magnetic tape for digital 

35 video. The track 9 comprises the marks and is scanna- 
ble by a read head for reading the stored information. 
The marks represent a bit sequence according to a 
channel code, such as EFM for CD (Eight to Fourteen 
Modulation). The bit sequence represents information 

40 according to predetermined error correction and format- 
ting rules, such as the CIRC (Cross Interleaved Reed- 
Solomon Code) for CD. According to the formatting 
rules the record carrier may be subdivided in address- 
able sectors, such as on the CD-ROM. The CD-ROM is 
described in standard ISO 10149, the CD-ROM specifi- 
cation. 

[0008] The information on the copy protected record 
carrier 1 comprises main information and access control 
information for controlling the access to the main infor- 

50 mation , so as to prevent access to main information cop- 
ied on an illegal copy, which copy does not comprise all 
necessary access control information. According to the 
invention the copy protected record carrier 1 is provided 
with logical errors 2, which logical errors constitute an 

55 error pattern representing at least some of the access 
control information. The error pattern has at least one 
logical error at a predetermined location, but preferably 
a pattern of logical errors at a relatively large number of 
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predetermined locations. A different error pattern may 
be generated for each new title to be distributed on a 
copy protected record carrier. In an embodiment of the 
error pattern the error locations should be intermixed 
with non-error locations or with essential information. 5 
Further the error pattern may comprise a number of iso- 
lated error locations in between non-error locations, but 
also some consecutive error locations. Preferably the 
pattern of error locations is a pseudo random pattern 
comprising circa 50% error locations and 50% non-error w 
locations, the pseudo random pattern being generated 
from a seed value by a predetermined algorithm. The 
error pattern is to be verified in an access control pro- 
cedure, which procedure is indissolubly embedded in 
the procedure to use the main information. The verifica- *5 
tion should include at least one error location and pref- 
erably also at least one non-error location in the vicinity 
of an error location. This prevents a malicious party of 
easily mimicking the error pattern by physically damag- 
ing a few locations. A logical error is constituted by a 20 
number of bit errors in the bit sequence, which number 
of bit errors is uncorrectable by said error correcting 
rules. The bit errors cannot be copied using a standard 
recording device, as such a device will accept informa- 
tion to be recorded without error correction bits. The re- 25 
corder will process this information according to the 
build in, predetermined error correcting and formatting 
rules for generating a new bit sequence, including newly 
generated and inherently correct error correction bits. 
Therefore this new bit sequence will not comprise any 30 
errors, and is not accessible for changing bits in such 
standard recording devices. The new bit sequence may 
be recorded on a writable record carrier, but this copy 
will not comprise the error pattern. It has to be noted, 
that the logical errors are to be applied to the bit se- 35 
quence after the error encoding step before writing the 
physical pattern of marks so as to be uncorrectable by 
the error decoding step after reading the marks. Apply- 
ing errors on a higher system level before the error en- 
coding, e.g. by intentionally changing the EDC (error de- *o 
tection codes) in a sector or a sector header in CD-ROM, 
may be easily mimicked by a malicious party, because 
the formatting process for higher levels is usually per- 
formed via software and therefore accessible for manip- 
ulation. An operational, but illegal, copy comprising the 45 
higher level errors may be made with standard recording 
devices and (adapted) software in the connected com- 
puter system, e.g. a bit copying program available for 
making copies of audio CD's. 

[0009] As burst errors will occur due to dirt or scratch- so 
es on the surface of a record carrier, error correcting 
rules, e.g. of CD, are especially designed for correcting 
burst errors by applying interleaving before storing and 
de-interleaving after reading. The bit errors constituting 
such a burst error will be mixed with a far larger number 55 
of other bits from the bit sequence by de-interleaving 
rules which are part of the formatting and error correct- 
ing rules. A number of consecutive bit errors sufficient 
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to cause the uncorrectable errors has to be longer than 
the longest correctable burst error. The error correcting 
rules are described with Figure 3. In a preferred embod- 
iment only selected bits of the bit sequence show errors, . 
which bits are selected so as to accumulate by de-inter- 
leaving, which de-interleaving is part of the formatting 
and error correcting rules. This results in a location on 
the record carrier showing a high concentration of er- 
rors, while adjoining locations show only a few or no bit 
errors. An example of bit errors is described with Figure 
4. Usually error correcting rules and especially (de)in- 
terleaving rules will operate on symbols, e.g. on bytes 
of 8 bits, while the error correcting process is applied to 
error words of a number of symbols accumulated by de- 
interleaving. The error symbols are selected to accumu- 
late during de-interleaving to an uncorrectable number 
in one or a few error words. 

[0010] An effective way of applying bit errors is to in- 
vert each bit from a selected symbol in the original bit 
sequence without errors, which selected symbol is to be 
provided with a bit error. Alternatively the bit errors may 
be appliedto the symbols, when said symbols are trans- 
lated into the pattern of physical marks, e.g. using a con- 
trollable EFM encoder. For said symbols the EFM en- 
coder might be controlled to change some of the phys- 
ical marks to be different from the originally intended 
marks based on the bit sequence without errors. Pref- 
erably the resulting physical marks comply with the con- 
straints specified for the physical marks, as this assures 
reliable functioning of the reading and decoding proc- 
ess. 

[0011] Figure 2 shows a logical map of the recording 
area of a copy protected record carrier. The recording 
area is subdivided in addressable sectors from the top 
at address 00 up to address MAX. The first area 21 may 
be a lead-in or pre-gap area, such as the 2 second area 
of silence on CD. The second area is a system area 22. 
comprising system information about the contents of the 
disc, such as the PVD (Primary Volume Descriptor) on 
CD-ROM. The remaining part of the disc is available for 
user data, such as main information and directory files. 
The user data area may be subdivided into several ar- 
eas, which subdivision is free and not limited to the map 
shown in Figure 2. In this map the remaining area com- 
prises a third area 23 comprising user files 28, a fourth 
area 24 not comprising user data, and a fifth area 25 
again comprising user data. According to the invention 
the fourth area 24 comprises a padding area 26. The 
padding area 26 has error sectors 1 1 indicated by the x 
and non-error sectors 1 2, which error sectors comprise 
the logical errors and constitute the error pattern. The 
padding area 26 may comprise a large number of sec- 
tors, e.g. 20 Mbyte, and may cover substantially all of 
the recording area not covered by the main information. 
This has the advantage, that when the presence of the 
error pattern has to be verified, each time a small 
number or only one of the error sectors may be selected 
from the large number available in the padding area. A 
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malicious person trying to intercept the verification will 
not see a recurring test of one or a few specific sector 
(s). but mostly different sectors will be read from a large 
address range for detecting the presence of logical er- 
rors. This will effectively prevent the malicious party 
from designing simple intercepting means for faking the 
output of reading a sector. A further advantage may be 
achieved if the writable disc holding the illegal copy has 
a smaller data capacity than the pressed disc. For ex- 
ample on most CD_ROM's a lot of the capacity is un- 
used, but may be completely filled up by the padding 
area without increasing the manufacturing cost, while 
CD-Recordable or CD-ReWritable have a smaller ca- 
pacity than a maximally filled CD-ROM. In that case not 
all information (user information and padding area) can 
be transferred to the illegal copy. In an embodiment, fur- 
ther access control information is comprised in the sys- 
tem area 22 or in some other area not directly accessible 
in a standard reading device, such as the lead-in, lead- 
out or pre-gap area 21 . The further access control infor- 
mation might be a licence code indicative for the party 
making use of the system for copy protecting record car- 
riers, and/or may be indicative for the error pattern , e.g. 
to be used as a seed in a error pattern generating algo- 
rithm. 

[0012] Figure 3 shows an error correcting unit used in 
the CD system, called the CIRC (Cross Interleaved 
Reed-Solomon Code). A detailed description of the 
CIRC error correcting rules may be found in GB 
2076569 (PHQ 80009), document D2, the decoder 
therein being described with figure 7. In Figure 3 the in- 
put (on the left) is a frame of 32 bytes consecutively 
stored on the record carrier, indicated by the column 
bytes numbered 0 to 31 , comprising twelve data bytes 
0-11, four C2 error correcting bytes 1 2-1 5, again twelve 
information bytes 16-27 and four C1 error correcting 
bytes. The odd bytes are delayed by one cycle in a first 
delay unit 31 , and the resulting error words of 32 bytes 
are error corrected by the C1 unit 32. The C1 unit can 
correct one byte error and detect all 2 and 3 byte errors, 
while 4-32 byte errors are detected with a very low fail- 
ure rate. If the C1 unit detects un uncorrectable error, it 
will flag all bytes to be unreliable. The output of the C1 
unit is delayed by a second delay unit 33, delaying byte 
0 by 27 * 4 = 108 frames, byte 1 by 26 * 4 = 102 frames 
etc. The output of the second delay unit 33 constitutes 
a second error word, which is error corrected by the C2 
unit. The C2 unit usually corrects up to 2 errors, but may 
correct up to 4 bytes by erasure if the C1 unit flags all 
detected errors. The output of the C2 unit is descram- 
bled by descramble unit 35. The described functions are 
the complement of inverse functions in the encoder, all 
functions being well-known from the CD system and de- 
scribed in detail in document D2. According to the in- 
vention a logical error result from bit errors being uncor- 
rectable ; therefore bit errors must be present in the input 
frames accumulating to at least 2 but preferably 3 or 
more errors in the error words on the input of the C1 



17 482 A2 6 

unit. Also at least 3 but preferably at least 5 errors should 
be present in at least one second error word on the input 
of the C2 unit. For 5 errors in one second error word this 
requires at least 17 consecutive error-flagged output 
5 frames of C1 , having errors in a group of 5 consecutively 
numbered information bytes. For example, errors in byte 
0 in frame 0 will accumulate at the input of C2 with errors 
in byte 2 in frame 8 and errors in byte 4 in frame 1 6. For 
creating a cluster of logical errors within a specified data 

10 unit, such as a sector in the CD system, preferably more 
bit errors than the above minimum of 5 errors in 1 7 con- 
secutive frames should be applied. A further error cor- 
recting layer, such as used in CD-ROM for error correct- 
ing within a sector, may correct some logical errors un- 

*5 correctable by the above error correcting rules. There- 
fore a larger number of logical errors should be included. 
An embodiment achieving a safe margin without risk of 
spreading the errors over a large area has errors in all 
of the first or second twelve consecutively numbered in- 

20 formation bytes. Said errors will spread due to the sec- 
ond delay unit over 12 * 4 = 48 frames and 1 additional 
frame because of the first delay unit and having 24 con- 
secutive frames with errors, over 48 + 1 4- 24 = 73 
frames. As a frame comprises 24 information bytes this 

25 affects 73 * 24 bytes = 1 752 bytes, which is well within 
one sector of the CD-ROM format (2352 bytes) provided 
the error frames are positioned within said sector. The 
sector comprises 98 frames, so at maximum 49 consec- 
utive frames can have errors without affecting neigh - 

30 bouring sectors. It is to be noted, that applying errors to 
all bytes in the frames, which would be the case if a 
whole area of the disk would be provided with errors, e. 
g. by physically damaging the area, is not a solution for 
creating logical errors. Such errors will spread at least 

35 over 28*4+1 =113 frames, and with a minimum of 1 7 
consecutive error frames over 1 30 frames. The number 
of bytes affected is 130 * 24 = 3232, which is far more 
than one sector. 

[001 3] When errors are detected which are uncorrect- 
40 able in the Ct and/or C2 unit, the bytes will not be 
changed, but flagged as errors. Bit errors in information 
bits results in bit errors to propagate to the output of the 
error correcting unit, whereas error correction bits are 
used in the error correction unit and will not be visible 
45 at the output. Therefore in a preferred embodiment the 
bit errors are present in the information bits and not in 
the error correcting bits. 

[0014] Moreover, bit errors should not be spread by 
de-interleaving to adjoining sectors which are to remain 

50 error free. Therefore in a preferred embodiment the part 
of the bit sequence corresponding to non-error sectors 
adjoining error sectors comprises substantially no bit er- 
rors. Although some bit errors may be corrected in the 
adjoining sectors, a higher risk for uncorrectable errors 

55 exists if further errors, e.g. caused by dirt, are combined 
with said bit errors. In that case a non-error sector may 
be falsely classified as an error sector. 
[0015] Although the bit errors are accumulated in a 
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few selected error words and therefore directly affect on- 
ly the selected locations, a large number of symbols (= 
bytes) will be flagged by the C1 unit as unreliable (in fact 
all symbols in all C1 words having 2 or more error bytes). 
The C2 error unit will first calculate a syndrome to detect 
any possible errors, which syndrome indicates if errors 
are present. Further calculation will indicate the number 
of errors and possibly indicate which symbols need to 
be corrected. For the correction several approaches 
may be used, e.g. errors in only 1 or 2 symbols may be 
corrected directly, and for correcting 2 to 4 error symbols 
the flags from the previous C1 unit may be used to indi- 
cate which symbol to replace (correction by erasure). 
Usually the C2 unit will not use any C1 flags if it detects 
0 or 1 errors. Therefore the large number of flagged, but 
unchanged, symbols will not be noticed or classified as 
errors by the C2 unit. Preferably for a sectored format 
said C1 flagged symbols should be as much as possible 
within the selected error sector, as additional errors 
caused by dirt etc. may cause uncorrectable C2 errors 
in combination with the C1 flagged symbols. For a de- 
tailed description of the error processing rules reference 
is made to D2. In a different embodiment using double 
layer C2/C1 error encoding errors are introduced during 
encoding after the C2 encoding step but before the C1 
encoding step. Hence during decoding no errors at the 
C1 decoder are detected, and no flagging of C1 symbols 
occurs. However at the C2 decoding step, the errors ap- 
pear and are uncorrectable. All errors can be easily con- 
trolled to be within one sector, as the interleaving and 
de-interleaving occurs after the C2 encoding and before 
the C2 decoding step. Alternatively a combination of C2 
and C1 errors may be used. 

[0016] The invention can be applied in systems using 
different error correcting rules, such as DVD. A corre- 
sponding pattern of bit errors counteracting the de-in- 
terleaving can be found according to the above descrip- 
tion. In further applications a more sophisticated ap- 
proach of error correction might be a repeated applica- 
tion of the error correcting rules by first interleaving the 
output of the first error correcting process like in the en- 
coder and secondly de-interleave and apply the error 
correcting rules again. As some errors may be corrected 
in the first process such a second error correcting proc- 
ess might further correct errors. To prevent such an ap- 
proach from correcting the logical errors, preferably the 
bit frequency and positioning of bit errors is such that 
they are uncorrectable in every error correcting layer. 
[001 7] Figure 4 shows a bit error pattern for the CIRC 
error correcting rules as described with Figure 3. The bit 
errors are designed to accumulate in the C1 error words 
as well as in the C2 error words, in both cases to 5 errors. 
The pattern of errors may be shifted to other information 
bytes (0-11. 16-27) ; but should cover only information 
bytes and no error correction bytes, in Figure 4 errors 
in bytes are indicated by the letters a ; b,c : d,e, whereas 
bytes without errors are not marked. To affect 20 con- 
secutive C1 words, 21 frames have been provided with 



errors, the odd bytes starting one frame earlier and the 
even frames stopping one frame later to compensate for 
the first delay unit 31 . Due to the delays in the second 
delay unit 33 the errors marked by the same letter will 

5 accumulate in the C2 words, so 4 consecutive C2 
frames will have 5 'e' errors, the next 4 C2 frames 5 'd' 
errors, up to the last 4 C2 frames with 'a' errors. No er- 
rors wil! be compensated because in each C1 or C2 er- 
ror word either 0 or 5 errors will accumulate. This error 

^0 scheme may easily be extended for more errors in more 
consecutive error words as required or for other inter- 
leaving rules. Also it may be applied a few times within 
one sector to prevent any subsequent burst error cor- 
recting process to correct the logical errors. As men- 

'5 tioned above with Figure 3, the C1 corrector has a 1 00% 
detection probability of 2 and 3 error words, while 4-32 
errors might occasionally be falsely corrected. There- 
fore a preferred embodiment using C1 errors only has 
3 errors accumulating in the C1 words. An effective error 

20 pattern having said 3 C1 errors may be derived from Fig- 
ure 4 by only applying the a,b,c errors and omitting the 
d and e errors. Alternatively instead of having 4 consec- 
utive C1 frames with errors, only the first of each quad- 
ruple may be provided with errors, resulting in one C2 

25 frame error. The error pattern starting in byte 0 as indi- 
cated in Figure 4 results in almost all C1 flagged, but 
unchanged bytes to precede the error bytes, the first one 
being byte 27 of frame 2 preceding the logical errors by 
108 frames. Only a few flagged, but unchanged bytes 

30 will follow after the logical errors, i.e. the last one being 
byte Oof frame 21 lagging 1 6 frames. Preferably by syn- 
chronizing the affected frames with the sectors the 
flagged, but unchanged bytes should be positioned 
within the error sector, e.g. the error pattern of Figure 4 

35 should be applied at the end of the error sector. Corre- 
spondingly, when applying the errors to the highest 
numbered bytes (e.g. 23-27), most flagged, but un- 
changed bytes will lag behind the logical errors. 
[0018] Figure 5 shows an arrangement for retrieving 

^o information from a copy protected record carrier 1 and 
processing the information. The arrangement compris- 
es a reading unit for reading the bit sequence from the 
record carrier 1 . The read unit comprises a read head 
41 for scanning the track and generating a read signal 

45 corresponding to the physical marks on the record car- 
rier, and a translating unit 42 for translating the read sig- 
nal into the bit sequence, e.g. an EFM decoder for de- 
coding in a CD system. The bit sequence is coupled to 
an error correcting unit 43 for recovering the information 

so and correcting possible errors, e.g. the CIRC corrector 
in a CD system. The recovered information is coupled 
to access control means 47 for controlling the access to 
the information. The access control information is avail- 
able for further processing on the output 48 of the ac- 

55 cess control means 47. During reading the read head 
41 is positioned on the track by a servo unit 44 of the 
usual type, while the record carrier is rotated by a motor 
unit 45. The reading of information is controlled via a 
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controller 45, which controller controls the motor unit 45, 
the servo unit 44 and the error correction unit 43. and is 
arranged for receiving read commands, e.g. via an in- 
terface to the access control means 47. The access con- 
trol means 47 may be implemented in circuits built into 
a reading device also comprising the above reading 
means. This has the advantage, that the information will' 
not be delivered on the output 48 if the respective ac- 
cess control information is not present on the record car- 
rier. The access control means may alternatively be im- 
plemented in a computer connected via an interface to 
a standard reading device, such as a CD-ROM drive. In 
the computer the access control means may be built into 
an interface board or may be effected by software run- 
ning on a central processing unit. The software for ef- 
fecting the access control can be delivered to a user on 
the copy protected record carrier. This is advantageous, 
in that no dedicated hardware is necessary and in that 
the user has all means necessary for accessing the copy 
protected information embodied on the record carrier. 
[0019] The access control according to the invention 
will be effected as follows. The access control means 
will first acquire access control information indicative for 
the error pattern. This access control information may 
be a pattern stored on the record carrier, e.g. the licence 
code described with Figure 2, or an access code sup- 
plied via a network, e.g. internet or on paper. In an em- 
bodiment the. error pattern may be generated using a 
seed value and a predefined algorithm, the seed value 
being stored on the copy protected record carrier. Sec- 
ondly the presence of logical errors must be verified to 
assure that the disc is an original, copy protected disc 
and not an illegal copy. The access control means will 
select one or more error location (s) on the record carrier, 
or error sector(s) if the record carrier is formatted in ad- 
dressable sectors, which error locations should have a 
logical error according to the error pattern. Thirdly the 
presence of an error is verified by reading the selected 
error location. As the reading device will generate an 
error message on the interface in the event that a sector 
to be read comprises uncorrectable errors, the presence 
of the logical errors can be detected effectively. As a 
copy will not comprise the logical errors, the copy will 
be rejected and the access to the information will be 
barred. Preferably a few error locations are selected at 
random from a large number of error locations available 
on the record carrier, e.g. in a padding area dedicated 
to comprise the error pattern having error sectors and 
non -error sectors. Alternatively the error sectors may be 
intermixed with valid sectors comprising normal user in- 
formation. For achieving a fast response for the access 
control to take place ; preferably only one error sector is 
selected and read. In practice reading one sector having 
uncorrectable errors might only cause a delay of a few 
seconds, which delay is caused by the reading device 
trying to read the sector a few times. Such retries are 
standard practice to improve the chance for successful 
recovery of information in the event of dirt or scratches. 



The error pattern may further be verified by selecting at 
least one non-error location, but not all non-error loca- 
tions, which non-error locations should not have a logi- 
cal error according to the error pattern, and verifying the 

5 absence of an error by reading the selected non-error 
location. As reading a non-error sector will be very fast, 
e.g. 0.2 seconds, a larger number of non-error sectors, 
e.g. 1 0 to 40. is preferably selected and read. Said non- 
error sectors are preferably selected via a random se- 

10 lection process from all available non-error sectors. In 
an embodiment the contents of the non-error sectors 
may be verified, e.g. by including a check value in such 
a sector to be derived from the sector number and the 
licence code by a predetermined encryption algorithm. 

is in a further embodiment non-error sectors are selected 
and verified before and after the one selected error sec- 
tor. This has the advantage that e.g. 21 to 81 apparently 
random selected sectors are read, from which only one 
is to comprise an error. This has the advantage, that a 

20 malicious party will have great difficulties trying to mimic 
this verification process. As the error pattern according 
to the invention is designed to accumulate all bit errors 
in the error sectors without affecting the adjoining sec- 
tors, preferably some non error sectors adjoining error 

25 sectors should be selected. This will most probably ex- 
pose illegal copies damaged in certain areas to mimic 
the error pattern. The access control for a computer pro- 
gram may be effected as follows. The information carrier 
contains the computer program, while some essential 

30 data are included in the access control information. The 
computer program may be encrypted itself, while a short 
startup program takes the place of the program and con- 
trols the access to the main program. The access control 
information may be, for example, a decoding key, a se- 

35 rial number or access code or, possibly, a small part of 
the program code (a subroutine, object or module). 
Needing these essential data, the program can only 
function well if both the information and the access con- 
trol information are available. The startup program may 

40 read access control information from a hidden place on 
the record carrier, such as the licence code included in 
the system area 22 (see Figure 2) and/or further access 
data files. Thereafter the presence of the error pattern 
may be verified as described above. 

45 [0020] Figure 6 shows a schematic diagram for copy 
protecting a record carrier. In the text below it is as- 
sumed, that the invention is applied under control of a 
licensor. In the first step 61 the publisher creates a new 
software title 71 . The publisher does not need to make 

50 any changes to the software in order to use the inven- 
tion. The system can first be fully developed and tested. 
In a second step 62 the publisher encrypts the main ex- 
ecutable file (e.g. for a DOS or Windows system) for cre- 
ating an encrypted file set 72. Using a utility provided by 

55 the licensor the publisher encrypts it using a licence 
number as the encryption key. Unique licence numbers 
are provided by the licensor for every product produced. 
As an example, if the software title to be protected has 
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a program called foo.exe the encryption process en- 
crypts it : renames it to foo.icd and includes a new pro- 
gram, provided by the licensor which is renamed to foo. 
exe. This program is then responsible for carrying out 
the security checks, verifying the licence number and 
launching the encrypted program (foo.icd). In a third 
step 63 the publisher creates an image file 73, such as 
an ISO 9660 Image, from the encrypted file sei 72. using 
a CD Authoring package the publisher creates an image 
file 73 of his complete software title onto a hard disk 
drive. In a fourth step 64 the image file 73 is modified to 
create the full contents 74 of the copy protected record 
carrier, having a logical map as described with Figure 2. 
A second utility provided by the licensor modifies the im- 
age file 73 by adding a licence structure including the 
licence number to the system area 22. The image file 
73 is further be modified to pad the size of the image to 
include the padding area. The total length is preferably 
more than 74 minutes (333,000 sectors). The licence 
structure holds a reference to the start and end sectors 
of the padding area. In the padding area, sectors will 
either be good or bad and the distribution of the sectors 
will be determined by a pseudo-random process, which 
may be seeded from the licence number. In a fifth step 
65 the image file is processed to create a master disc 
75, e.g. by a Mastering House. The image file 74 is sent 
to the Mastering House on magnetic tape or other suit- 
able med[a. Using Laser Beam Recorder software mod- 
ified according to the invention a master disc 75 is pro- 
duced. The Laser Beam Recorder software makes use 
of the licence structure to determine which sectors in the 
padded area are marked as being bad and which ones 
are good. The ratio of marked to good sectors may be 
fixed, e.g. approximately 50%. The errors are applied 
according to the error patterns described above with 
Figure 4. In a sixth step 66 copy protected record carri- 
ers 76, such as CD-ROM's, are produced by duplicating 
the master disc 75. The error pattern is transferred to 
each disc in this step. 

[0021] Although the invention has been explained by 
an embodiment using the CD-ROM as example having 
the CIRC error correcting rules, it will be clear that other 
record carriers, magnetic or optical tape, etc can be em- 
ployed in the invention, if such record carriers comprise 
information protected by predefined error protecting 
rules. For example, the high density DVD disc also uses 
an error correcting process. Whilst the invention has 
been described with reference to preferred embodi- 
ments thereof, it is to be understood that these are not 
limitative examples. Thus, various modifications may 
become apparent to those skilled in the art, without de- 
parting from the scope of the invention, as defined by 
the claims. For example, applying error patterns in error 
protected data transmitted via a network such as inter- 
net may provide access control according to the inven- 
tion. Further, the invention lies in each and every novel 
feature or combination of features. 
[0022] Preferred embodiments of the invention can be 



summarized as follows. 

[0023] The invention relates to a method for copy pro- 
tecting a record carrier having information stored there- 
on according to predetermined formatting and error cor- 

5 recting rules, comprising the steps of creating an image 
file comprising main information, generating access 
control information for controlling the access to the main 
information, producing a master carrier in dependence 
on the image file and the access control information, 

10 which producing comprises the steps of creating a bit 
sequence by applying the formatting and error correct- 
ing rules to the image file and translating the bit se- 
quence into a physical pattern of marks, and multiplicat- 
ing the record carrier using the master carrier, charac- 

*5 terized according to the invention in that in the producing 
step bits in the bit sequence are changed according to 
the access control information to constitute logical er- 
rors which cannot be corrected by said error correcting 
rules and which constitute an error pattern. 

20 [0024] Preferably, at least part of the main information 
is encrypted in dependence on the access control infor- 
mation. Advantageously, at least some of the access 
control information is included in the image file and the 
error pattern is generated in dependence on said includ- 
es ed access control information. 

[0025] The invention further relates to a copy protect- 
ed record carrier having a bit sequence stored thereon 
representing information according to predetermined, 
formatting and error correcting rules, the information 

30 comprising main information and access control infor- 
mation for controlling the access to the main informa- 
tion, characterized according to the invention in that the 
bit sequence comprises bit errors constituting logical er- 
rors which cannot be corrected by said error correcting 

35 rules and which constitute an error pattern representing 
at least part of the access control information. The 
measures are advantageous in that the error pattern can 
be easily detected, while errors cannot be included in 
information stored on a copy of the record carrier via a 

^0 standard recording device, because such recording de- 
vices have built in error correcting rules, which cannot 
be manipulated. 

[0026] Preferably, the record carrier is a CD, the error 
word correcting rule being the C2 layer. Advantageous- 
^5 |y, the bit errors are located so as to accumulate by de- 
interleaving, which de-interleaving is part of the format- 
ting and error correcting rules. Also advantageously, the 
bit errors are located so as to accumulate in at least one 
second error word which cannot be corrected by a see- 
so ond error word correcting rule. Also advantageously, the 
record carrier is a CD, the error word correcting rule be- 
ing the C2 layer and the second error word correcting 
rule being the C1 layer of the CD error correcting rules. 
[0027] The invention further relates to a method for 
55 detecting access control information on such a copy pro- 
tected record carrier, characterized in that the method 
comprises the steps of selecting at least one error loca- 
tion, but not all error locations, which error location(s) 
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should have a logical error according to the error pat- 
tern, and verifying the presence of an error by reading 
the selected error location(s). 

[0028] Preferably, the method comprises a step of re- 
trieving at least some access control information indic- 
ative of the error pattern from the main information be- 
fore selecting locations. Advantageously, while the 
record carrier is subdivided into addressable sectors, 
the presence or absence of an error at a location is ver- 
ified by reading the respective sector and generating an 
error message when an uncorrectable error is detected 
during reading the sector. Also advantageously, charac- 
terized in that the record carrier comprises software for 
executing the access control information detection 
method on a computer system. 

[0029] The invention further relates to a retrieval ar- 
rangement for retrieving information from such a copy 
protected record carrier, the arrangement comprising 
reading means for reading the record carrier, the read- 
ing means comprising a read unit for extracting a bit se- 
quence stored on the record carrier and an error cor- 
recting unit for processing the bit sequence, character- 
ized in that the arrangement comprises access control 
means for controlling the access to the information, 
which access control means are embodied so as to de- 
tect the access control information by selecting at least 
one error location, but not all error locations, which error 
location(s) should have-a logical error according to the 
error pattern, and by verifying the presence of an error 
by reading the selected error location via the reading 
means. This is advantageous in that selecting a few er- 
ror locations from an available larger number results in 
a fast response for the access control means. Reading 
a sector having errors might take up to 30 seconds on 
a standard reading device, such as a CD-ROM drive, 
due to automatic retries. Also selecting different loca- 
tions for each access control session increases the dif- 
ficulties for a malicious party in mimicking the access 
control process 

[0030] Preferably, while the record carrier is subdivid- 
ed into addressable sectors, the reading means com- 
prise a control unit for controlling the reading of a sector 
and generating an error message when an uncorrecta- 
ble error is detected. 

[0031] The invention is also based on the following 
recognition. Physically damaging selected parts of a 
record carrier leads to corrupted physical marks. When 
reading such damaged parts a read head may lose the 
track, or the translation from the read signal to a bit se- 
quence may be disrupted or lose synchronisation, which 
all result in an uncontrollable number of errors. Moreo- 
ver physical damage may be easily detected from phys- 
ical parameters and may be mimicked by a malicious 
party by physical means. Also, physically damaging 
sectors increases the production cost. The invention is 
based on a logical pattern of errors, which does not in- 
crease production cost and allows precise control of the 
resulting errors. In addition the inventors have had the 



insight, that physical errors cannot be used for generat- 
ing errors in a limited pan of the retrieved information, 
as they are similar to burst errors, which type of error is 
spread widely due to de-interleaving steps usually ap- 

5 plied to the bit sequence in an error correcting and de- 
formatting process for retrieving the information. There- 
fore, an embodiment of the copy protected record carrier 
is characterized in that, while the bit sequence compris- 
es information bits and error correction bits, the infor- 

10 mation bits comprise the bit errors and/or in that the bit 
errors are located so as to accumulate in an error word 
uncorrectable by an error word correcting rule when re- 
producing. This is advantageous in that the bit errors 
are concentrated in error words resulting unambiguous- 

15 |y in logical errors, while no error bits are spread to other 
parts of the retrieved information. 
[0032] A further embodiment of the copy protected 
record carrier which record carrier is subdivided into ad- 
dressable sectors, is characterized in that the record 

20 carrier comprises a padding area, which padding area 
comprises error sectors and non-error sectors, which er- 
ror sectors comprise the logical errors and constitute the 
error pattern. Using sectors as constituting elements for 
the error pattern has the advantage, that standard read- 

25 jng devices will read and process the read information 
sector by sector, while generating an error message if 
somewhere in a sector an uncorrectable error has been 
detected. - - - - 

[0033] A further embodiment of the copy protected 

30 record carrier is characterized in that the part of the bit 
sequence corresponding to non-error sectors which ad- 
join error sectors comprises substantially no bit errors. 
In the case of some dirt or scratches the affected sectors 
will show random or small burst errors. If such errors 

35 had to be corrected in the presence of intentional bit er- 
rors, there would be an increased risk that a non-error 
sector would be classified as an error sector. Having 
substantially no intentional bit errors is advantageous in 
that there is a low probability of non-error sectors being 

40 wrongly classified. 

[0034] A further embodiment of the copy protected 
record carrier is characterized in that, while the record 
carrier has a predetermined information storage capac- 
ity of which the main information covers a part, the pad- 

45 ding area substantially covers the remaining part of the 
information storage capacity. This has the following ad- 
vantage. All logical errors constituting the error pattern 
can only be detected by reading all of the padding area. 
On an average record carrier a relatively large percent- 

50 age of the information storage capacity may be unused, 
which is available for the error pattern without the pro- 
duction cost increasing. At for example 20 seconds 
reading time for a sector having errors due to retries, it 
will take over 1 000 hours to read the total padding area 

55 on a CD-ROM having 60% unused capacity. 

[0035] An embodiment of the method for detecting ac- 
cess control information is characterized in that the 
method further comprises the steps of selecting at least 
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one non-error location, but not all non-error locations, 
which non-error location(s) should not have a logical er- 
ror according to the error pattern, and verifying the ab- 
sence of an error by reading the selected non-error lo- 
cations). This is advantageous in that an illegal copy 
having also errors on non-error locations will be detect- 
ed. 

[0036] A further embodiment of the method for detect- 
ing access control information is characterized in that at 
least one non-error location is selected which adjoins 
an error location. This is advantageous in that an illegal 
copy having physical or burst type errors spreading over 
more locations due to de-interleaving rules will be de- 
tected. 

List of related documents: 
[0037] 

(D1) EP-0545472 (PHN 13922) Closed information 
system with physical copy protection 

(D2) GB 2076569 (PHQ 80009) The CIRC error de- 
tection and correction. 

(D3) WO 95/03655 CD PROM encryption system. 
Claims 

1. Method for copy protecting a record carrier having 
information stored thereon according to predeter- 
mined formatting and error correcting rules, com- 
prising the steps of 

(a) creating an image file comprising main in- 
formation, (63) 

(b) generating access control information for 
controlling the access to the main information, 
(64) 

(c) producing a master carrier in dependence 
on the image file and the access control infor- 
mation (65), which producing comprises the 
steps of 

° creating a bit sequence by applying the for- 
matting and error correcting rules to the im- 
age file, 

• changing bits in the bitsequence according 
to the access control information to consti- 
tute logical errors which cannot be correct- 
ed by said error correcting rules and which 
constitute a predetermined error pattern for 
controlling access to the information on the 
record carrier, the predetermined error pat- 
tern being defined by error locations and 
non-error locations, the predetermined er- 
ror pattern representing at least some of 
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the access control information, and 
• translating the bit sequence into a physical 
pattern of marks, 

5 (d) multiplicating the record carrier using the 

master carrier (66) 

2. Method for copy protecting a record carrier as 
claimed in claim 1 , in which at least part of the main 

10 information is encrypted in dependence on the ac- 
cess control information. 

3. Method for copy protecting a record carrier as 
claimed in claim 1 , in which at least some of the ac- 

15 cess control information is included in the image file 
and the predetermined error pattern is generated in 
dependence on said included access control infor- 
mation. 

20 4. A method as claimed in any of claims 1 to 3, further 
comprising: 

(e) selecting at least one part of the physical 
pattern of marks on the record carrier, which se- 

25 lected part should have a logical error accord- 

ing to the predetermined error pattern, 

(f) reading the selected part of the physical pat- 
tern of marks on the record carrier, and 

(g) controlling access to the main information 
30 on the record carrier in dependence on the 

presence of an error in the selected part of the 
physical pattern of marks on the record carrier. 

5. Copy protected record carrier (1) having a bit se- 
35 quence stored thereon representing information ac- 
cording to predetermined formatting and error cor- 
recting rules, the information comprising main infor- 
mation (23, 24, 25) and access control information 
(21, 22, 26) for controlling the access to the main 

40 information, wherein the bit sequence comprises bit 
errors constituting logical errors (2) which cannot be 
corrected by said error correcting rules and which 
constitute a predetermined error pattern represent- 
ing at least part of the access control information, 

4 5 the record carrier being characterised in that the 
predetermined error pattern is defined by error lo- 
cations and by non-error locations. 

6. Copy protected record carrier as claimed in claim 
50 5, which record carrier is subdivided into address- 
able sectors, wherein the record carrier comprises 
a padding area (26), which padding area comprises 
error sectors (11) and non-error sectors ( 1 2) , which 
error sectors comprise the logical errors and con- 

55 stitute the predetermined error pattern. 

7. Copy protected record carrier as claimed in claim 
6. wherein the part of the bit sequence correspond- 
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ing to non-error sectors which adjoin error sectors, 
comprises substantially no bit errors. 

8. Copy protected record carrier as claimed in claim 
6, wherein, while the record carrier has a predeter- 
mined information storage capacity of which the 
main information covers a part the padding area 
substantially covers the remaining part of the infor- 
mation storage capacity. 

9. Copy protected record carrier as claimed in claim 
5, wherein, while the bit sequence comprises infor- 
mation bits and error correction bits, the information 
bits comprise the bit errors. 

10. Copy protected record carrier as claimed in claim 
5, wherein the bit errors are located so as to accu- 
mulate in at least one error word which cannot be 
corrected by an error word correcting rule during re- 
production. 

11. Copy protected record carrier as claimed in claim 
10, wherein the record carrier is a CD, the error 
word correcting rule being the C2 layer. 

12. Copy protected record carrier as claimed in claim 
10, wherein the bit errors are located so as to accu- 
mulate by de-interleaving, which de-interleaving is 
part of the formatting and error correcting rules. 

13. Copy protected record carrier as claimed in claim 
10, wherein the bit errors are located so as to accu- 
mulate in at least one second error word which can- 
not be corrected by a second error word correcting 
rule. 

14. Copy protected record carrier as claimed in claim 
12 and 13, wherein the record carrier is a CD, the 
error word correcting rule being the C2 layer and 
the second error word correcting rule being the C1 
layer of the CD error correcting rules. 



• verifying the absence of an error by reading the 
selected non-error location(s). 

16. Method for detecting access control information as 
5 claimed in claim 15, wherein at least one non-error 

location (12) is selected which adjoins an error lo- 
cation (11). 

17. Method for detecting access control information as 
10 claimed in claim 1 5, wherein the method comprises 

a step of 

retrieving at least some access control infor- 
mation indicative of the predetermined error pattern 
from the main information before selecting loca- 
ls tions. 

18. Method for detecting access control information as 
claimed in ciaim 15, wherein, while the record car- 
rier is subdivided into addressable sectors, the 

20 presence or absence of an error at a location is ver- 

ified by reading the respective sector and generat- 
ing an error message when an uncorrectable error 
is detected during reading the sector. 

25 19. Copy protected record carrier as claimed in claim 5, 
wherein the record carrier comprises software for 
executing the method of any one of claims 1 5 to 1 8 
on a computer system. 

30 20. Retrieval arrangement for retrieving information 
from a copy protected record carrier according to 
any one of claims 5 to 14, the arrangement com- 
prising reading means for reading the record carrier, 
the reading means comprising a read unit (41 ,42) 

35 for extracting a bit sequence stored on the record 
carrier and an error correcting unit (43) for process- 
ing the bit sequence, characterized in that the ar- 
rangement comprises access control means (47) 
for controlling the access to the information, which 

40 access control means are embodied so as to detect 
the access control information 



15. Method for detecting access control information on 
a copy protected record carrier (1 ) according to any 
one of claims 5 to 14, characterized in that the 45 
method comprises the steps of 

° selecting at least one error location (1 1 ), but not 
all error locations, which error location(s) 
should have a logical error (2) according to the so 
predetermined error pattern, and 

• verifying the presence of an error by reading 
the selected error location(s). 

o selecting at least one non-error location (12), 

but not all non-error locations, which non-error 55 
location(s) should not have a logical error (2) 
according to the predetermined error pattern, 
and 



• by selecting at least one error location (11 ), but 
not all error locations, which error location(s) 
should have a logical error (2) according to the 
predetermined error pattern, and 

• by verifying the presence of an error by reading 
the selected error location via the reading 
means, and 

• by selecting at least one non-error location 
(12), but not all non-error locations, which non- 
error location(s) should not have a logical error 
(2) according to the predetermined error pat- 
tern, and 

• by verifying the absence of an error by reading 
the selected non-error location(s). 

21. Retrieval arrangement as claimed in claim 20. 
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wherein., while the record carrier is subdivided into 
addressable sectors, the reading means comprise 
a control unit (46) for controlling the reading of a 
sector and generating an error message when an 
uncorrectable error is detected. 5 

22. Computer program comprising software for per- 
forming the method of any one of claims 15 to 18 
on a computer system. 

10 

23. Record carrier, subdivided into addressable sec- 
tors, and carrying a bit sequence representing in- 
formation according to formatting and error correct- 
ing rules, the information comprising main informa- 
tion and access control information for controlling *5 
the access to the main information, and a licence 
structure comprising instructions for performing the 
following steps: 

• changing bits in the bit sequence according to 20 
the access control information to constitute log- 
ical errors which cannot be corrected by said 
error correcting rules and which constitute a 
predetermined error pattern for controlling ac- 
cess to the information on the record carrier the 25 
predetermined error pattern representing at 
least some of the access control information, 
and 

© translating the bit sequence into a physical pat- 
tern of marks including error sectors and non- 30 
error sectors, the error sectors containing the 
errors and the non-error sectors containing no 
uncorrectable errors. 

24. Record carrier of claim 23, wherein the predeter- 35 
mined error pattern is defined by error locations and 
non-error locations. 

25. Record carrier of claim 23 or 24, wherein the licence 
structure further comprises a reference to the start *o 
and end sectors of a padding area (26) carried on 

the reord carrier, the logical errors being stored in 
the padding area.. 

26. Record carrier of claim 23, 24, 25, wherein the li- *s 
cence structure further comprises the licence 
number. 

27. Record carrier of claim 26, wherein the predefined 
correction error pattern is seeded from the licence so 
number. 
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123456789012345678901 



0 a a a a 

1 bbbbaaaa 

2 ccccbbbbaaaa 

3 ddddccccbbbbaaaa 

4 eeeeddddccccbbbbaaaa 

5 eeeeddddccccbbbb 

6 eeeeddddcccc 

7 eeeedddd 

8 e e e e 
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recting rules predefined for said record carrier (1) and 
which pattern of logical errors (2) is defined by error lo- 
cations and non-error locations. The pattern of logical 
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errors (2) represents access control information. The 
logical errors (2) are generated during decoding the bit UJ 
sequence read from the record carrier (1 ). Bit errors may jjrf 
be positioned in the bit sequence so as to counteract ^ 
de-interleaving which is part of an error decoding proc- 
ess in a reading device and accumulate in error words 
which are uncorrectable. 
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